Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Cc3OnJ8p2Cp_XK-3y8L6L1asUQw.roa
File: Cc3OnJ8p2Cp_XK-3y8L6L1asUQw.roa (raw, json)
Hash identifier: 8LBoMA43ctrZK/dn9i98DUCY9fwuXinut1FVT9GoEzE=
Subject key identifier: 09:CD:CE:9C:9F:29:D8:2A:7F:5C:AF:B7:CB:C2:FA:2F:56:AC:51:0C
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 12DC
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Cc3OnJ8p2Cp_XK-3y8L6L1asUQw.roa
Signing time: Sun 01 Jun 2025 05:39:10 +0000
ROA not before: Sun 01 Jun 2025 05:39:10 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4828 (0x12dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 1 05:39:10 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=09CDCE9C9F29D82A7F5CAFB7CBC2FA2F56AC510C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:5c:9f:91:94:56:69:3e:83:04:0c:1c:fa:
ce:4e:8f:24:65:ca:99:2a:24:71:61:7d:f5:84:8c:
2e:67:63:85:23:42:b0:ab:14:f2:91:75:c7:5e:8c:
89:af:2e:2d:5c:dd:12:11:52:71:f5:c9:ad:dc:48:
68:df:db:32:66:49:1b:6b:45:b7:50:cf:11:ac:d4:
2d:fb:f2:a1:1f:96:0c:eb:c0:dd:0e:84:1f:1e:7e:
8b:2c:cb:d3:f4:e1:4b:72:93:c9:f3:95:0a:39:dd:
42:97:9f:3a:04:a4:76:23:7b:88:0e:ff:0e:ca:26:
8c:c2:3b:ea:9b:eb:23:ae:22:93:96:89:08:ce:88:
e9:5a:7d:ec:ed:b6:b6:7b:ca:aa:a7:14:c9:54:00:
31:9f:8d:7e:ae:34:fd:04:d9:51:96:98:a0:1b:19:
17:79:06:82:6b:a0:a1:18:1f:87:c4:c9:96:13:2c:
d2:26:a4:4c:da:ea:b0:4e:6d:95:7c:64:4e:9f:fe:
8c:a3:0e:ae:69:69:10:f5:07:ad:87:dc:38:ef:93:
3f:42:04:03:12:6f:86:80:ff:ff:1e:62:ab:c6:14:
2e:62:9b:7c:01:d3:b2:b3:93:8a:19:97:8c:46:a2:
29:9c:f8:c1:f7:47:6c:5a:41:8f:24:76:4d:4b:93:
94:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CD:CE:9C:9F:29:D8:2A:7F:5C:AF:B7:CB:C2:FA:2F:56:AC:51:0C
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Cc3OnJ8p2Cp_XK-3y8L6L1asUQw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1c:3b:c9:71:f4:05:48:3f:5d:fb:20:d8:e8:b5:1b:9f:61:24:
18:94:3c:56:66:a0:da:e3:85:4f:3a:83:60:63:26:fa:8a:6b:
50:7d:85:a3:ba:59:ca:ad:f1:0d:d5:ca:7e:ce:6e:88:9c:6e:
ef:a7:5c:80:77:ec:ba:3f:76:c5:c2:42:ed:c2:3b:1c:5c:07:
99:b4:0b:4e:5a:67:cf:ab:5d:42:c8:0f:70:26:52:ff:b8:9b:
9d:e2:15:e7:9c:d2:5b:4e:19:a1:92:3c:f2:63:3d:f6:57:9d:
bb:3e:cb:98:e5:cc:a1:a8:81:20:6b:66:ee:56:41:98:42:51:
3e:8a:2a:cb:c0:95:a4:ef:8c:b5:67:45:4b:2b:30:b4:9a:98:
77:64:40:c2:6d:59:97:b3:b2:f3:a0:4c:56:e8:ec:ee:ee:1d:
60:9c:8d:f9:60:ad:ab:23:57:2b:74:24:77:ee:27:52:71:75:
6c:df:f6:9b:62:a2:ea:04:03:a7:c5:b8:65:98:39:72:95:0d:
5d:29:eb:6b:00:5a:ba:57:fc:c9:c8:25:28:07:fc:fe:8c:c3:
e0:92:61:92:58:64:d5:e1:f5:b4:92:5c:bd:e7:32:12:37:b8:
18:ad:83:c2:5f:58:35:eb:81:9e:19:9c:ae:6d:ee:f3:37:8d:
84:c2:e9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:00:38 2025 by rpki-client